CyberNews A Critical Linux Flaw Exposed: Nine-Year-Old RefluXFS Bug Gives Unprivileged Users Root Access on Default RHEL Installs For nearly a decade, a critical vulnerability has been lurking in the depths of Red Hat Enterprise Linux (RHEL), waiting to be exploited. The RefluXFS bug, discovered back in 2017, has finally come under scrutiny after researchers revealed … Read more
Google has introduced a new feature for users who have been locked out of their accounts, allowing them to recover access using a selfie video. This move comes amidst growing concerns over account security and the increasing use of AI-powered attacks. The new feature works by asking users to record a short video that includes … Read more
A wave of attacks is sweeping through cPanel and WHM servers, thanks to an ingenious tactic employed by threat actors: exploiting GitHub Actions Runners to gain unauthorized access. The vulnerability, detected in recent days, has caught security professionals off guard, highlighting the ever-evolving nature of cyber threats. The attack vector hinges on a clever manipulation … Read more
A New Threat Emerges: Synthetic Identity Fraud Targets Machine Identities The latest evolution of identity theft, synthetic identity fraud, is spreading its tentacles into the realm of machine identities, putting organizations and their digital assets at risk. This insidious form of cybercrime has been quietly gaining momentum, with devastating consequences for businesses that fail to … Read more
Cybersecurity firm Check Point is scrambling to patch a critical vulnerability in its SmartConsole management platform, allowing attackers with knowledge of the flaw to gain full administrative access to affected systems. The issue, which has been described as “extremely severe,” affects various versions of Check Point’s SmartConsole software used by organizations worldwide. According to the … Read more
A nine-year-old Linux flaw, dubbed RefluXFS, has been exposed, allowing local users on default Red Hat Enterprise Linux (RHEL) installs to gain root access without needing a password. The vulnerability, discovered by researchers at CyberNews.work, affects numerous systems worldwide, underscoring the importance of regular security audits and patch management. The flaw resides in the XFS … Read more
Google has introduced a new feature that allows users locked out of their accounts to recover access through facial recognition technology. This move comes after years of criticism over password-related lockouts, which often leave users unable to regain control over their Google services. The introduction of selfie video recovery is part of Google’s ongoing efforts … Read more
Cybersecurity experts are sounding the alarm after discovering that attackers have exploited GitHub Actions Runners, a popular automation tool, to compromise cPanel and WHM servers on a massive scale. The attack vector leverages a critical vulnerability in the way these tools interact with each other, highlighting the need for increased vigilance in protecting server infrastructure. … Read more
Synthetic Identity Fraud is Spreading its Reach, Targeting Machines and Humans Alike A new wave of cyber threats is sweeping the globe, one that threatens not just human identities but also machine ones. Synthetic identity fraud, a type of attack where attackers create fake online personas using stolen or fabricated information, has long plagued human … Read more
StrongestLayer, a San Francisco-based cybersecurity startup, has just secured an additional $4.1 million in seed funding, bringing its total investment to a substantial $9.3 million. This influx of capital will fuel the company’s go-to-market strategy and platform expansion efforts. What makes StrongestLayer stand out is its AI-native email security platform, designed to combat modern email … Read more